Vulnerability in Esi Products Webeoc

CVE-2005-4029

WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, which could be useful in other attacks such as locking out valid users via brute force methods.

EPSS: 0.013 (68.5th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)